{"id":2887711,"name":"python-gnupg","ecosystem":"pypi","description":"A wrapper for the Gnu Privacy Guard (GPG or GnuPG)","homepage":"https://github.com/vsajip/python-gnupg","licenses":"BSD","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/vsajip/python-gnupg","keywords_array":["GnuPG","cryptography","encryption","decryption","signing","verification"],"namespace":null,"versions_count":34,"first_release_published_at":"2023-08-28T22:42:44.062Z","latest_release_published_at":"2025-12-31T17:16:22.000Z","latest_release_number":"0.5.6","last_synced_at":"2026-04-16T17:15:25.875Z","created_at":"2022-04-10T12:20:56.019Z","updated_at":"2026-04-16T17:15:25.875Z","registry_url":"https://pypi.org/project/python-gnupg/","install_command":"pip install python-gnupg --index-url https://pypi.org/simple","documentation_url":"https://gnupg.readthedocs.io/","metadata":{"funding":null,"documentation":"https://gnupg.readthedocs.io/","classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","License :: OSI Approved :: BSD License","Operating System :: OS Independent","Programming Language :: Python","Programming Language :: Python :: 2","Programming Language :: Python :: 2.7","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: 3.6","Programming Language :: Python :: 3.7","Programming Language :: Python :: 3.8","Programming Language :: Python :: 3.9","Topic :: Software Development :: Libraries :: Python Modules"],"normalized_name":"python-gnupg","project_status":null},"repo_metadata":{"id":41165465,"uuid":"436952016","full_name":"vsajip/python-gnupg","owner":"vsajip","description":"A Python API for the GNU Privacy Guard (GnuPG). Encrypt, decrypt, sign and verify your data using Python! N.B. This repository has been migrated from Mercurial on 2019-11-16, so references to commits before this date will refer to the Mercurial source and not this Git repository. The migration is marked by a commit that adds a .gitignore file.","archived":false,"fork":false,"pushed_at":"2026-01-02T17:40:04.000Z","size":2005,"stargazers_count":145,"open_issues_count":7,"forks_count":40,"subscribers_count":2,"default_branch":"master","last_synced_at":"2026-02-19T16:28:47.538Z","etag":null,"topics":["encryption-decryption","gnupg","python","signing","verification"],"latest_commit_sha":null,"homepage":"https://docs.red-dove.com/python-gnupg/","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/vsajip.png","metadata":{"files":{"readme":"README.rst","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-12-10T11:18:04.000Z","updated_at":"2026-02-18T16:04:31.000Z","dependencies_parsed_at":"2024-03-13T10:31:01.073Z","dependency_job_id":"5f11da46-0a92-4850-9078-d840e00fb632","html_url":"https://github.com/vsajip/python-gnupg","commit_stats":{"total_commits":458,"total_committers":17,"mean_commits":"26.941176470588236","dds":0.06113537117903933,"last_synced_commit":"9e2a4f510a7e351794a055993d3a3f04fb289e00"},"previous_names":[],"tags_count":22,"template":false,"template_full_name":null,"purl":"pkg:github/vsajip/python-gnupg","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/vsajip","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30601177,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-16T23:44:20.790Z","status":"ssl_error","status_checked_at":"2026-03-16T23:44:16.532Z","response_time":96,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[{"name":"0.5.6","sha":"54e9ca0f80f5a0d0b4252e13d5c431f3f5f40c71","kind":"commit","published_at":"2025-12-31T16:42:53.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.5.6","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.5.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.5.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.6/manifests"},{"name":"0.5.5","sha":"5f83627f3eff1da5fb1e1b75a73a3afba0168445","kind":"commit","published_at":"2025-08-04T18:51:08.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.5.5","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.5.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.5.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.5/manifests"},{"name":"0.5.4","sha":"8419ce8175e6e06058006a1a37b01934bf49a12a","kind":"commit","published_at":"2025-01-07T10:15:14.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.5.4","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.5.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.5.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.4/manifests"},{"name":"0.5.3","sha":"498440ce2caefc10a7426a52bc1866c1ce0f923c","kind":"commit","published_at":"2024-09-20T16:23:54.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.5.3","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.5.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.5.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.3/manifests"},{"name":"0.5.2","sha":"cda862f8b31c2678d5691ee55797a1cf6d44fe42","kind":"commit","published_at":"2023-12-12T07:58:50.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.5.2","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.5.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.2/manifests"},{"name":"0.5.1","sha":"1aabc9b63279960058425a62c0bd06697eaff034","kind":"commit","published_at":"2023-07-22T10:27:02.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.5.1","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.1/manifests"},{"name":"0.5.0","sha":"5099fd1d07c3015d0b9437e1e1e0570693ed5e62","kind":"commit","published_at":"2022-08-23T15:48:29.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.5.0","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.5.0/manifests"},{"name":"0.4.9","sha":"3082fa8eb7e6a99768452fb58349310828959507","kind":"commit","published_at":"2022-05-20T08:05:01.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.4.9","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.4.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.4.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.9/manifests"},{"name":"0.4.8","sha":"c4473784fbca5a1e3b030be92f705994a8a256a7","kind":"commit","published_at":"2021-11-24T09:15:06.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.4.8","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.4.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.4.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.8/manifests"},{"name":"0.4.7","sha":"6fc643962270a63e15ef6401ceb0b2bb73d36d92","kind":"commit","published_at":"2021-03-11T07:13:28.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.4.7","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.4.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.4.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.7/manifests"},{"name":"0.4.6","sha":"4e405b5e2b84bc2bd19c8a88fc7dad3f60da07c1","kind":"commit","published_at":"2020-04-17T11:32:13.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.4.6","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.4.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.4.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.6/manifests"},{"name":"0.4.5","sha":"691c70fe58615a376bd1e0c3823a71a07f50655f","kind":"commit","published_at":"2019-08-12T16:52:20.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.4.5","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.4.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.4.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.5/manifests"},{"name":"0.4.4.1","sha":"2f43f690cd517e76744c0d7ee5ab5265a8090a80","kind":"commit","published_at":"2019-01-24T08:46:50.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.4.4.1","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.4.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.4.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.4.1/manifests"},{"name":"0.4.4","sha":"e2b2d823e9c48d75475cd62e963275981490a557","kind":"commit","published_at":"2019-01-24T08:26:42.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.4.4","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.4.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.4.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.4/manifests"},{"name":"0.4.3","sha":"968c61e231207f3231ef3c60ee2d065c024c1710","kind":"commit","published_at":"2018-06-13T12:47:53.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.4.3","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.4.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.3/manifests"},{"name":"0.4.2","sha":"3fa96920c7d6a935c2d399394946f113ad43ab18","kind":"commit","published_at":"2018-03-28T14:27:36.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.4.2","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.2/manifests"},{"name":"0.4.1","sha":"06cd00922a35ee45252e5f583c696aa17cd8fd08","kind":"commit","published_at":"2017-07-06T14:12:26.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.4.1","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.1/manifests"},{"name":"0.4.0","sha":"e500461d46ff7a9082a18a8ab4dab587ae001613","kind":"commit","published_at":"2017-01-29T18:42:20.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.4.0","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.4.0/manifests"},{"name":"0.3.9","sha":"aff31f9fd15f7620bbd9ec23cc07cbacda215899","kind":"commit","published_at":"2016-09-10T07:53:21.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.3.9","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.3.9/manifests"},{"name":"0.3.8","sha":"956c1a4e14641c8972289838a3ac940b1177e95c","kind":"commit","published_at":"2015-09-24T17:20:22.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.3.8","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.3.8/manifests"},{"name":"0.3.7","sha":"6635ce5401389d82d1adc25418c26adbfe61b31c","kind":"commit","published_at":"2014-12-07T21:01:25.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.3.7","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.3.7/manifests"},{"name":"0.3.6","sha":"4232f5b2bc01f6bc164e65f4898b7f4c01c6b13d","kind":"commit","published_at":"2014-02-07T08:56:18.000Z","download_url":"https://codeload.github.com/vsajip/python-gnupg/tar.gz/0.3.6","html_url":"https://github.com/vsajip/python-gnupg/releases/tag/0.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/vsajip/python-gnupg@0.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/tags/0.3.6/manifests"}]},"repo_metadata_updated_at":"2026-04-15T16:17:50.975Z","dependent_packages_count":90,"downloads":17925378,"downloads_period":"last-month","dependent_repos_count":2116,"rankings":{"downloads":0.10014822697730988,"dependent_repos_count":0.23526281783284556,"dependent_packages_count":0.21454904792672264,"stargazers_count":8.147839757884071,"forks_count":7.569555302166477,"docker_downloads_count":0.41712591691687884,"average":2.7807468449507176},"purl":"pkg:pypi/python-gnupg","advisories":[{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFoNjItY2g5NS02M3do","url":"https://github.com/advisories/GHSA-qh62-ch95-63wh","title":"Duplicate Advisory: python-gnupg allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended","description":"**Withdrawn:** Duplicate of GHSA-2fch-jvg5-crf6","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2020-03-13T20:05:10.000Z","withdrawn_at":"2020-06-16T20:25:44.000Z","classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2019-6690","https://bitbucket.org/vinay.sajip/python-gnupg/commits/1a5196800604c05f9e347110b4ecca538ba68cdc","https://lists.debian.org/debian-lts-announce/2019/02/msg00021.html","https://pypi.org/project/python-gnupg/#history","https://seclists.org/bugtraq/2019/Jan/41","http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00008.html","http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00058.html","http://packetstormsecurity.com/files/151341/Python-GnuPG-0.4.3-Improper-Input-Validation.html","http://www.securityfocus.com/bid/106756","https://blog.hackeriet.no/cve-2019-6690-python-gnupg-vulnerability","https://github.com/advisories/GHSA-2fch-jvg5-crf6","https://github.com/advisories/GHSA-qh62-ch95-63wh","https://github.com/pypa/advisory-database/tree/main/vulns/python-gnupg/PYSEC-2019-115.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WMV6XNPPL3VB3RQRFFOBCJ3AGWC4K47","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6KYZMN2PWXY4ENZVJUVTGFBVYEVY7II","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X4VFRUG56542LTYK4444TPJBGR57MT25","https://usn.ubuntu.com/3964-1"],"source_kind":"github","identifiers":["GHSA-qh62-ch95-63wh"],"repository_url":"https://bitbucket.org/vinay.sajip/python-gnupg","blast_radius":0.0,"created_at":"2022-12-21T16:13:25.743Z","updated_at":"2026-04-16T10:11:04.845Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFoNjItY2g5NS02M3do","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFoNjItY2g5NS02M3do","packages":[{"ecosystem":"pypi","package_name":"python-gnupg","versions":[{"first_patched_version":"0.4.4","vulnerable_version_range":"\u003c 0.4.4"}],"purl":"pkg:pypi/python-gnupg"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFoNjItY2g5NS02M3do/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJmY2gtanZnNS1jcmY2","url":"https://github.com/advisories/GHSA-2fch-jvg5-crf6","title":"Improper Input Validation python-gnupg","description":"python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a \"CWE-20: Improper Input Validation\" issue affecting the affect functionality component.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2019-03-25T16:17:53.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-6690","https://blog.hackeriet.no/cve-2019-6690-python-gnupg-vulnerability/","https://github.com/advisories/GHSA-2fch-jvg5-crf6","https://lists.debian.org/debian-lts-announce/2019/02/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WMV6XNPPL3VB3RQRFFOBCJ3AGWC4K47/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6KYZMN2PWXY4ENZVJUVTGFBVYEVY7II/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X4VFRUG56542LTYK4444TPJBGR57MT25/","https://pypi.org/project/python-gnupg/#history","https://seclists.org/bugtraq/2019/Jan/41","https://usn.ubuntu.com/3964-1/","http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00008.html","http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00058.html","http://packetstormsecurity.com/files/151341/Python-GnuPG-0.4.3-Improper-Input-Validation.html","https://lists.debian.org/debian-lts-announce/2021/12/msg00027.html","https://web.archive.org/web/20200227091727/http://www.securityfocus.com/bid/106756"],"source_kind":"github","identifiers":["GHSA-2fch-jvg5-crf6","CVE-2019-6690"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:30.723Z","updated_at":"2026-04-05T20:08:08.657Z","epss_percentage":0.21434,"epss_percentile":0.95567,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJmY2gtanZnNS1jcmY2","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJmY2gtanZnNS1jcmY2","packages":[{"ecosystem":"pypi","package_name":"python-gnupg","versions":[{"first_patched_version":"0.4.4","vulnerable_version_range":"\u003c 0.4.4"}],"purl":"pkg:pypi/python-gnupg"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJmY2gtanZnNS1jcmY2/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXIzdnItcHJ3di04Nmc5","url":"https://github.com/advisories/GHSA-r3vr-prwv-86g9","title":"python-gnupg's shell_quote function does not properly quote strings","description":"The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using \"$(\" command-substitution sequences, a different vulnerability than CVE-2014-1928.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2018-11-06T23:14:39.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.7,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2014-1927","https://code.google.com/p/python-gnupg/issues/detail?id=98","https://github.com/advisories/GHSA-r3vr-prwv-86g9","http://seclists.org/oss-sec/2014/q1/245","http://seclists.org/oss-sec/2014/q1/294","http://www.debian.org/security/2014/dsa-2946","https://code.google.com/p/python-gnupg","https://github.com/pypa/advisory-database/tree/main/vulns/python-gnupg/PYSEC-2014-90.yaml"],"source_kind":"github","identifiers":["GHSA-r3vr-prwv-86g9","CVE-2014-1927"],"repository_url":null,"blast_radius":28.931986271259387,"created_at":"2022-12-21T16:13:32.486Z","updated_at":"2026-04-16T10:11:13.755Z","epss_percentage":0.00727,"epss_percentile":0.72509,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXIzdnItcHJ3di04Nmc5","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXIzdnItcHJ3di04Nmc5","packages":[{"ecosystem":"pypi","package_name":"python-gnupg","versions":[{"first_patched_version":"0.3.6","vulnerable_version_range":"= 0.3.5"}],"purl":"pkg:pypi/python-gnupg"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXIzdnItcHJ3di04Nmc5/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMyZngtOHI3Ni1naDM2","url":"https://github.com/advisories/GHSA-c2fx-8r76-gh36","title":"python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters","description":"python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2018-11-06T23:14:22.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","references":["https://nvd.nist.gov/vuln/detail/CVE-2013-7323","http://seclists.org/oss-sec/2014/q1/243","http://seclists.org/oss-sec/2014/q1/244","http://seclists.org/oss-sec/2014/q1/294","http://www.debian.org/security/2014/dsa-2946","https://code.google.com/p/python-gnupg","https://github.com/pypa/advisory-database/tree/main/vulns/python-gnupg/PYSEC-2014-89.yaml","https://github.com/advisories/GHSA-c2fx-8r76-gh36"],"source_kind":"github","identifiers":["GHSA-c2fx-8r76-gh36","CVE-2013-7323"],"repository_url":null,"blast_radius":26.9366768732415,"created_at":"2022-12-21T16:13:32.495Z","updated_at":"2026-04-16T10:11:13.755Z","epss_percentage":0.01162,"epss_percentile":0.7852,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMyZngtOHI3Ni1naDM2","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMyZngtOHI3Ni1naDM2","packages":[{"ecosystem":"pypi","package_name":"python-gnupg","versions":[{"first_patched_version":"0.3.7","vulnerable_version_range":"\u003c 0.3.5"}],"purl":"pkg:pypi/python-gnupg"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMyZngtOHI3Ni1naDM2/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJqYzgtNHI2Zy0yODJq","url":"https://github.com/advisories/GHSA-2jc8-4r6g-282j","title":"python-gnupg's shell_quote function does not properly escape characters","description":"The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using \"\\\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2018-11-06T23:13:02.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.7,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2014-1928","https://code.google.com/p/python-gnupg/issues/detail?id=98","https://github.com/advisories/GHSA-2jc8-4r6g-282j","http://seclists.org/oss-sec/2014/q1/246","http://seclists.org/oss-sec/2014/q1/294","http://www.debian.org/security/2014/dsa-2946","https://code.google.com/p/python-gnupg","https://github.com/pypa/advisory-database/tree/main/vulns/python-gnupg/PYSEC-2014-91.yaml"],"source_kind":"github","identifiers":["GHSA-2jc8-4r6g-282j","CVE-2014-1928"],"repository_url":null,"blast_radius":28.931986271259387,"created_at":"2022-12-21T16:13:33.833Z","updated_at":"2026-04-16T10:11:13.774Z","epss_percentage":0.00205,"epss_percentile":0.42529,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJqYzgtNHI2Zy0yODJq","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJqYzgtNHI2Zy0yODJq","packages":[{"ecosystem":"pypi","package_name":"python-gnupg","versions":[{"first_patched_version":"0.3.6","vulnerable_version_range":"= 0.3.5"}],"purl":"pkg:pypi/python-gnupg"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJqYzgtNHI2Zy0yODJq/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZjcjUteHI5aC1tdmM1","url":"https://github.com/advisories/GHSA-vcr5-xr9h-mvc5","title":"python-gnupg vulnerable to shell injection","description":"python-gnupg 0.3.5 and 0.3.6 allow for shell injection via a failure to escape backslashes in the `shell_quote()` function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2018-11-06T23:12:48.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2014-1929","https://github.com/advisories/GHSA-vcr5-xr9h-mvc5","http://seclists.org/oss-sec/2014/q1/245","http://seclists.org/oss-sec/2014/q1/335","http://www.debian.org/security/2014/dsa-2946","https://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/2014-June/028512.html","https://code.google.com/archive/p/python-gnupg/issues/98","https://web.archive.org/web/20200228170437/http://www.securityfocus.com/bid/65539","https://www.openwall.com/lists/oss-security/2014/02/04/3","https://www.openwall.com/lists/oss-security/2014/02/04/4","https://github.com/pypa/advisory-database/tree/main/vulns/python-gnupg/PYSEC-2014-92.yaml"],"source_kind":"github","identifiers":["GHSA-vcr5-xr9h-mvc5","CVE-2014-1929"],"repository_url":null,"blast_radius":30.92729566927728,"created_at":"2022-12-21T16:13:32.504Z","updated_at":"2026-04-05T20:08:08.652Z","epss_percentage":0.00063,"epss_percentile":0.19617,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZjcjUteHI5aC1tdmM1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZjcjUteHI5aC1tdmM1","packages":[{"ecosystem":"pypi","package_name":"python-gnupg","versions":[{"first_patched_version":"0.3.7","vulnerable_version_range":"\u003e= 0.3.5, \u003c= 0.3.6"}],"purl":"pkg:pypi/python-gnupg"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZjcjUteHI5aC1tdmM1/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/python-gnupg","docker_dependents_count":347,"docker_downloads_count":64768670,"usage_url":"https://repos.ecosyste.ms/usage/pypi/python-gnupg","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/python-gnupg/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-19T14:04:11.294Z","issues_count":121,"pull_requests_count":23,"avg_time_to_close_issue":6747347.609090909,"avg_time_to_close_pull_request":6346829.173913044,"issues_closed_count":110,"pull_requests_closed_count":23,"pull_request_authors_count":14,"issue_authors_count":64,"avg_comments_per_issue":3.4958677685950414,"avg_comments_per_pull_request":3.8260869565217392,"merged_pull_requests_count":13,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":10,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":520906.0,"past_year_avg_time_to_close_pull_request":72560.0,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":2,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":9,"past_year_avg_comments_per_issue":1.2,"past_year_avg_comments_per_pull_request":1.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/vsajip%2Fpython-gnupg/issues","maintainers":[{"login":"vsajip","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vsajip"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/python-gnupg/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/python-gnupg/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/python-gnupg/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/python-gnupg/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/python-gnupg/codemeta","maintainers":[{"uuid":"vsajip","login":"vsajip","name":null,"email":null,"url":null,"packages_count":18,"html_url":"https://pypi.org/user/vsajip/","role":null,"created_at":"2023-02-05T19:43:47.550Z","updated_at":"2023-02-05T19:43:47.550Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/vsajip/packages"}]}